CVE-2008-3786

Cross-site scripting XSS vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter aka "Gallery or event name" field in a search action...

CVE-2008-3786

The CVE-2008-3786 entry concerns a Cross-site Scripting (XSS) vulnerability in index.php of PICTURESPRO Photo Cart 3.9. The issue arises from the qtitle parameter (Gallery or event name) in a search action, where user-supplied input is not properly sanitized, enabling an attacker to inject arbitr...

CVE-2008-3786

creationtimestamp| type| source ---|---|--- 2008-08-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32291...